Overview

overview

7

Static

static

7

bee4af6ae5...18.exe

windows7-x64

7

bee4af6ae5...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    bee4af6ae5ccac855e974a8328b76967_JaffaCakes118

  • Size

    241KB

  • Sample

    240824-sw9w5sycmm

  • MD5

    bee4af6ae5ccac855e974a8328b76967

  • SHA1

    9dc060875d5b019a17eedc3c300df382cd17b302

  • SHA256

    9b1d3894a2299ddcbd1be50cd31b3bbb5876496249e461aa0dd8a31fc64d4f8e

  • SHA512

    946c07958d13ee3abd9272c32f2353c043f636a4885cac0c0e937cce7120656244b33d39b9f65af56356afba926f29b04942c4c3648d4ee5cfe044dda3d2520b

  • SSDEEP

    6144:NkeENDvTSn2SV/GuhYdViC7X57+nMYaRmsNOJ/:NNEND/k/GLPX57+nfMmKK/

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      bee4af6ae5ccac855e974a8328b76967_JaffaCakes118

    • Size

      241KB

    • MD5

      bee4af6ae5ccac855e974a8328b76967

    • SHA1

      9dc060875d5b019a17eedc3c300df382cd17b302

    • SHA256

      9b1d3894a2299ddcbd1be50cd31b3bbb5876496249e461aa0dd8a31fc64d4f8e

    • SHA512

      946c07958d13ee3abd9272c32f2353c043f636a4885cac0c0e937cce7120656244b33d39b9f65af56356afba926f29b04942c4c3648d4ee5cfe044dda3d2520b

    • SSDEEP

      6144:NkeENDvTSn2SV/GuhYdViC7X57+nMYaRmsNOJ/:NNEND/k/GLPX57+nfMmKK/

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks